chore: sync public mirror from internal

[evalops-mirror]

Summary

• sync the sanitized public tree from dx-corp/mono
• keep dx-corp/code as a generated public mirror of the private source of truth
• preserve public-owned CI and trusted-publishing workflows from the public checkout
• internal source SHA: f85ea3e433c29ca965a8940cefa8efbb7f46c2d8
• last generated public sync base: f273f9064fc052632b76f0a74be6fbdd1ad11f57
• previewed public-tree drift: 122 file(s) to copy/update and 0 stale file(s) to delete
• public-only commits since last generated sync: 0
• to pause generated syncs while hand-editing this branch, apply the sync-hold label to this PR; the sync workflow skips every push while it is set

Source-of-truth status

Projection: deixic-code

• Source: dx-corp/mono@f85ea3e433c29ca965a8940cefa8efbb7f46c2d8

• Prior destination base: f273f90

• Content SHA-256: 489cfe5065a3880db2d45cf3cf981f2a55c119abf49fefedc69410f30176ce7b

• Result: drift_detected; 122 changed, 0 deleted

• Destination-owned content is preserved. Destination CI is a separate health signal.

• copy/update .repository-projection.json

• copy/update packages/local-host-rs/src/agent/native_codex_tests.rs

• copy/update vendor/email-encoding-0.4.2.patch

• copy/update vendor/email-encoding-0.4.2/.cargo_vcs_info.json

• copy/update vendor/email-encoding-0.4.2/.github/workflows/ci.yml

• copy/update vendor/email-encoding-0.4.2/.gitignore

• copy/update vendor/email-encoding-0.4.2/Cargo.toml

• copy/update vendor/email-encoding-0.4.2/Cargo.toml.orig

• copy/update vendor/email-encoding-0.4.2/LICENSE-APACHE

• copy/update vendor/email-encoding-0.4.2/LICENSE-MIT

• copy/update vendor/email-encoding-0.4.2/README.md

• copy/update vendor/email-encoding-0.4.2/src/body/base64.rs

• copy/update vendor/email-encoding-0.4.2/src/body/chooser.rs

• copy/update vendor/email-encoding-0.4.2/src/body/mod.rs

• copy/update vendor/email-encoding-0.4.2/src/headers/hex.rs

• copy/update vendor/email-encoding-0.4.2/src/headers/hex_encoding.rs

• copy/update vendor/email-encoding-0.4.2/src/headers/mod.rs

• copy/update vendor/email-encoding-0.4.2/src/headers/quoted_string.rs

• copy/update vendor/email-encoding-0.4.2/src/headers/rfc2047.rs

• copy/update vendor/email-encoding-0.4.2/src/headers/rfc2231.rs

Drift sample

• copy/update .repository-projection.json
• copy/update packages/local-host-rs/src/agent/native_codex_tests.rs
• copy/update vendor/email-encoding-0.4.2.patch
• copy/update vendor/email-encoding-0.4.2/.cargo_vcs_info.json
• copy/update vendor/email-encoding-0.4.2/.github/workflows/ci.yml
• copy/update vendor/email-encoding-0.4.2/.gitignore
• copy/update vendor/email-encoding-0.4.2/Cargo.toml
• copy/update vendor/email-encoding-0.4.2/Cargo.toml.orig
• copy/update vendor/email-encoding-0.4.2/LICENSE-APACHE
• copy/update vendor/email-encoding-0.4.2/LICENSE-MIT
• copy/update vendor/email-encoding-0.4.2/README.md
• copy/update vendor/email-encoding-0.4.2/src/body/base64.rs
• copy/update vendor/email-encoding-0.4.2/src/body/chooser.rs
• copy/update vendor/email-encoding-0.4.2/src/body/mod.rs
• copy/update vendor/email-encoding-0.4.2/src/headers/hex.rs
• copy/update vendor/email-encoding-0.4.2/src/headers/hex_encoding.rs
• copy/update vendor/email-encoding-0.4.2/src/headers/mod.rs
• copy/update vendor/email-encoding-0.4.2/src/headers/quoted_string.rs
• copy/update vendor/email-encoding-0.4.2/src/headers/rfc2047.rs
• copy/update vendor/email-encoding-0.4.2/src/headers/rfc2231.rs

Public-only commits since last generated sync

• none detected since last generated sync

Validation

• generated by the sync-public-release-mirror workflow in public-tree mode

Test Plan

• generated by the maestro-sync-public-release-mirror workflow in public-tree mode
• public-source-provenance require-internal-pr confirms internal source PR lineage
• generated mirror PRs use the slim public CI path (fmt/clippy/smoke + provenance); full cargo test/evals already ran on internal main for this SHA
• bot review threads on generated mirror PRs are advisory and do not block the next sync update

Staged Rollout

• Staging is unnecessary for this generated mirror PR: it does not independently promote user-visible behavior. It mirrors already-reviewed internal source from dx-corp/mono@f85ea3e433c29ca965a8940cefa8efbb7f46c2d8, including existing hidden/evaluation surfaces, and keeps public package parity behind the established public-source-provenance gate.

[evalops-mirror]

Resolved 0 review-bot thread(s) on this generated public mirror PR.
Left 0 human-started thread(s) unresolved.

Review of mirrored code belongs on the mono source PR.
See https://github.com/dx-corp/mono/issues/9100 for the triage pattern.